Skip to content

Post orders: how to write them

Post orders are the written manual for one specific security post: what the guard does, when, how and whom to call. They should cover duties, hours, access rules, the patrol route, emergency procedures, contacts, escalation, reporting and prohibited actions, with a version number and date. Both the client and the security provider approve them, and no instruction may ask a guard to do anything the law does not allow.

Updated: 5 min readSources: 2

What are post orders in security?

They are the written instructions for one specific security post, telling the guard what to do, when, and whom to call. Their purpose is the same service on every shift, whoever is on duty.

The contract says what the client is buying. Post orders say how it is delivered in practice, on one particular site. Without them, the service depends on each guard’s memory.

  • Consistency: the Sunday relief guard does the same as the regular one.
  • Fast onboarding: a new guard learns the post from a document, not from hearsay.
  • Accountability: the client and the supervisor have something concrete to check against.

What should post orders include?

Duties, hours and handover, access rules, the patrol route, emergency procedures, contacts, escalation, reporting, prohibited actions and version details.

  • Duties: what the guard does, written as verbs: “checks”, “records”, “informs”. Not “ensures security”.
  • Hours: the post’s hours, when handover happens and what is handed over (keys, equipment, open issues).
  • Access rules: who gets in, where, with what proof; how visitors, suppliers and vehicles are logged.
  • Patrol route: checkpoints, order and frequency, with a floor plan if there is one.
  • Emergencies: fire, medical incident, break-in, power cut, evacuation — consistent with the building’s own emergency plan.
  • Contacts: supervisor, operations team, client contact, maintenance, emergency services.
  • Escalation: who is told, in what order, and how quickly.
  • Reporting: what gets written each shift and for each incident, and where.
  • Prohibited actions: what the guard never does at this post.
  • Version control: version number, date, who approved it, what changed.

Is there a post orders template I can use?

Yes — use the twelve-part outline below and fill it in for your own site. Keep each part short and practical.

  1. Document details: post, site, version number, effective date, approval signatures.
  2. Site description: entrances, critical points, opening hours, floor plan.
  3. Hours and handover: times, handover checklist.
  4. Duties by time: what happens at the start, during and at the end of the shift.
  5. Access control: rules for staff, visitors, suppliers, vehicles.
  6. Patrols: route, checkpoints, frequency.
  7. Emergency procedures: a short step-by-step per scenario.
  8. Contacts: names, roles, phone numbers, hours of availability.
  9. Escalation: who, in what order, how quickly.
  10. Reporting: what, when and where it is recorded.
  11. Prohibited actions.
  12. Change history and a read-and-signed record for every guard.

Write for the guard who will read them at 3 a.m.: short sentences, one step per line, no generalities.

What can post orders not require?

They cannot ask a guard to do anything the law does not allow, nor give a guard powers the law does not give. They are work instructions, not a source of rights.

Where an instruction involves a person — a suspect, an aggressive visitor, a theft — write what the guard observes, records and whom they inform, and when the competent authorities are called. If the client asks for more, the security provider must confirm it is lawful before it is written in.

  • CCTV: if the post watches cameras, the Hellenic Data Protection Authority notes that CCTV may not be used to monitor or evaluate employees (article 27, Law 4624/2019).
  • Retention: Directive 1/2011 requires footage to be deleted within 15 working days at most if no incident occurs (article 8). Post orders must follow this, not work around it.
  • Signs: clearly visible signs before the camera range (article 12) — the guard can check they stay in place.

Who approves post orders?

Both the client and the security provider. The client approves what the site needs; the provider confirms the orders are workable and lawful. Every guard signs that they have read them.

  • Client: the site manager confirms access rules, hours, contacts and priorities.
  • Security provider: the supervisor or operations manager confirms the orders can be carried out with the agreed staff and hours, and that they stay within the law.
  • Guards: every guard who covers the post signs that they have read the current version.

Ask for the post orders to be referenced in the contract. See questions to ask a security company before signing.

When should post orders be updated?

Whenever something changes on site, after every serious incident, and at a regular review you agree with the provider. Every change is issued as a new version.

  • Triggers: new entrances or hours, changed contacts, works, new equipment, an incident that exposed a gap.
  • Version: a new number, an effective date and a short note of what changed.
  • Withdrawal: old versions are removed from the post so only one is in force.
  • Briefing: the supervisor explains the change to the guards and collects new read-and-signed records.

At a glance

  • Post orders tell the guard what to do, when, how and whom to call at one specific post.
  • They cover duties, hours, access, patrols, emergencies, contacts, escalation, reporting, prohibited actions and versioning.
  • They cannot give guards powers the law does not give; where people are involved, they say observe, record, inform.
  • The client and the security provider both approve them; every guard signs that they have read them.
  • Every change is a new, dated version, and old copies are withdrawn.

Frequently asked questions

What is the difference between a security contract and post orders?

The contract defines what service the client is buying. Post orders describe how that service is delivered in practice, shift by shift, on one specific site.

Who writes post orders?

Usually the security provider drafts them from the client’s needs, and both sides approve them before they take effect.

How often should post orders change?

Whenever something on site changes or an incident exposes a gap, plus a regular agreed review. Each change is a new, dated version.

Sources

Every legal or pay point in this guide was checked against the official sources below.

  1. Αρχή Προστασίας Δεδομένων — Βιντεοεπιτήρηση: εισαγωγή (Οδηγία 1/2011, ΓΚΠΔ, άρθρο 27 ν. 4624/2019)Checked
  2. Αρχή Προστασίας Δεδομένων — Οδηγία 1/2011 για τη χρήση συστημάτων βιντεοεπιτήρησης, άρθρα 8 & 12Checked

Want us to look at your site?

Talk to the OVIT operations team — a real person answers.

Request a proposal